Get a Demo
Let's Patch It!
Book a short call with one our specialists, we'll walk you through how Endor Patches work, and ask you a few questions about your environment (like your primary programming languages and repository management). We'll also send you an email right after you fill out the form, feel free to reply with any questions you have in advance!
Back to all
Reachability Analysis That Cuts 92% of Noise
Book a Demo
Identify all dependencies
Prioritize which are riskiest
Fix without breaking code
{
"items": [
{
"title": "High Ratio of High Severity Vulnerabilities",
"description": "A high fraction of high severity vulnerabilities among the discovered vulnerabilities indicates an elevated security risk and potentially systematic security issues with this codebase. Analysis only considers vulnerabilities associated with this repository and not its dependencies. Vulnerability information is based on OSV.dev data and Endor's vulnerability database",
"category": "security",
"type": "downscore"
},
{
"title": "Unfixed High Severity Vulnerabilities",
"description": "Unfixed high severity vulnerabilities discovered in a repository indicate an elevated security risk. Analysis only considers vulnerabilities associated with this repository and not its dependencies. Vulnerability information is based on OSV.dev data and Endor's vulnerability database",
"category": "security",
"type": "downscore"
},
{
"title": "Unfixed Medium Severity Vulnerabilities",
"description": "Unfixed medium severity vulnerabilities discovered in a repository indicate a somewhat elevated security risk. Analysis only considers vulnerabilities associated with this repository and not its dependencies. Vulnerability information is based on OSV.dev data and Endor's vulnerability database",
"category": "security",
"type": "downscore"
},
{
"title": "Too Many Vulnerabilities",
"description": "A high number of vulnerabilities discovered in a repository indicates an elevated security risk and potentially systematic security issues with this codebase. Analysis only considers vulnerabilities associated with this repository and not its dependencies. Vulnerability information is based on OSV.dev data and Endor's vulnerability database",
"category": "security",
"type": "downscore"
},
{
"title": "High Ratio of High Fix Priority Vulnerabilities",
"description": "A high fraction of high fix priority vulnerabilities among the discovered vulnerabilities indicates an elevated security risk and that the repository needs immediate maintenance. A vulnerability is considered high priority based on our analysis. Analysis only considers vulnerabilities associated with this repository and not its dependencies. Vulnerability information is based on OSV.dev data and Endor's vulnerability database",
"category": "security",
"type": "downscore"
},
{
"title": "High Number of Dependent Packages",
"description": "A high number of packages depend on this package. For internal packages we only count other internal dependent packages, while for open source packages we only count open source dependent packages",
"category": "popularity",
"type": "upscore"
}
]
}
